Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Redis updates prevent attackers from running code

published 7 months ago

Summary

Several weaknesses were found in the Redis data store that could let a remote user execute commands on your server. Updating to one of the listed versions fixes these problems. Apply the latest Redis package to keep your system safe.

What to do

Update cleanstart redis to version 8.2.2-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	redis	< 8.2.2-r0 Fix: upgrade to 8.2.2-r0

Original advisory text

Security fixes for CVE-2015-8080, CVE-2019-10192, CVE-2019-10193, CVE-2020-14147, CVE-2021-32625, CVE-2021-32626, CVE-2021-32627, CVE-2021-32628, CVE-2021-32672, CVE-2021-32675, CVE-2021-32687, CVE-2021-32762, CVE-2021-41099, CVE-2022-24736, CVE-2022-24834, CVE-2022-35977, CVE-2022-3647, CVE-2023-36824, CVE-2023-41053, CVE-2023-41056, CVE-2023-45145, CVE-2024-31227, CVE-2024-31228, CVE-2024-31449, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844 applied in versions: 5.0.4-r0, 5.0.8-r0, 6.0.3-r0, 6.2.0-r0, 6.2.4-r0, 6.2.5-r0, 6.2.6-r0, 6.2.7-r0, 7.0.12-r0, 7.0.4-r0, 7.0.5-r0, 7.0.6-r0, 7.0.8-r0, 7.2.1-r0, 7.2.2-r0, 7.2.4-r0, 7.2.5-r1, 8.2.2-r0

Multiple security vulnerabilities affect the redis package. These issues are resolved in later releases. See references for individual vulnerability details.

References

Timeline

Published1 Apr 2026

Updated9 Sep 2026

First seen9 Sep 2026

Sources

CLEANSTART-2026-JR53141 · OSV

Track software like this

Free during beta